MAIL System in SuSE 10.1 and 10.2 Install Michel Bisson (Michel@linuxint .com) 


MAIL System 
in SuSE 10.1 and 10.2 Install 


- Mail system: postfix, qoopper, amavis, clamav, kmail, imap, mail(for scripts) 


Postfix : - add the local etho addr in /etc/postfix/main.cf 
eg. inet_interfaces = 127.0.0.1 ::1 192.168.0.10 
- run command: rcpostfix restart 


POP3 server: 
- install qpopper 
- change the /et/xinetd.d/qpopper 
disable= no 
-run command: rcxinetd restart 


Watching incoming mails: 
run: tail -f /var/log/mail 


Sending mails via scripts: 
echo -e "hallo Martin, \n Message." | mail -s "Betreff" email@addresse 


Antivirus with Postfix: 

(Found Virusses will be stored in var/spool/amavis/virusmails/) 
Install the following packages: 

amavıs-new 

clamav 

clamav-db (only if no internet connection) Taken from SuSE 10.0 DVD 
- Changes: 

- Edit the file /etc/amavisd.conf 

Adapt the follwoing line: to be the FQDN of the local host 


eg. Smydomain = 'laptop.linux.site'; 
- Edit /etc/postfix/master.cf change the following first line from: 
smtp inet n - n - 2 smtpd 
to 
smtp inet n - n - 2 smtpd -o content_filter=smtp: [127.0.0.1]:10024 
and uncomment the following line(delete the first '#' in this line) 
localhost:10025 inet n - n - - smtpd -o content_filter= 


Run the commands: 


For SuSE 10.1 only: (apparmor disturbs the connection of Postfix to amavis) 
rcapparmor stop 
cp /sbin/rcapparmor /etc/init.d/apparmor 
insserv -r apparmor 
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For all SUSE 

insserv amavis 

insserv freshclam 

rcamavis start 

rcfreshclam start 

repostfix restart 

freshclam (to start the download of the virus database from the Internet) 


POP3S (Secure pop3) Configuration 


Install the package 'imap' 


Run the commands: 

cd /etc/ssl/certs 

openssl req -new -x509 -nodes -out ipop3d.pem -keyout ipop3d.pem 
Answer the questions(can be anything) 


Edit the file /etc/xinetd.d/imap 
Under the section 'service pop3s' 
disable = no 


Run the command rcxinetd restart 


In the Mail client pop configuration, 
use SSL and LOGIN or PLAIN Login method. 
Enter the user login name and password. 


Secure SMTP with SASL(SuSE 9.2/10.x) 


Installation: 

Install the following packages: 
cyrus-sasl, cyrus-sasl-crammd5, cyrus-—sasl-digestmd5 
cyrus-sasl-saslauthd 


Postfix basic configuration: 
in /etc/postfix/main.cf 
Make sure that following 2 parameters are entered properly: 


inet_interfaces = 127.0.0.1 ::1 <HostIpPp> 
myhostname = <Hostname> 

eg. inet_interfaces = 127.0.0.1 ::1 192.168.100.70 
myhostname = laptop.linux.site 


To activate sas1 authentication do the following: 
in /etc/postfix/main.cf 


broken_sasl_auth_clients = yes 
smtpd_sasl_auth_enable = yes 
smtpd_recipient_restrictions = 


permit_mynetworks, (take this one out for local testing) 
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permit_sasl_authenticated, 
reject_unauth_destination 


- Use the server's shadow password system via PAM: 
- Start the saslauthd Daemon: 
rcesaslauthd start 
insserv saslauthd (for permanent start at boot time) 


- Verify that In SUSE 10.1 /usr/lib/sasl2/smtpd.conf 
or SUSE 10.2 /etc/sas12/smtpd.conf 
pwcheck_method: saslauthd 
mech_list: plain login 
- To add new users to sasl authentication: 
mkdir /etc/empty 
useradd -mk /etc/empty -s /bin/false username 


- To test locally the sas1 authentication: 
testsaslauthd -u username -p password 


- MAILDIR Mailbox configuration: 
Normally the mailbox is in /var/mail/username in 'mbox' format. 
To change the mailbox type to Maildir Format do the following: 
-In /etc/postfix/main.cf: 
Make sure the directive 'mailbox_command' is as follows: 
mailbox command = procmail -a "SEXTENSION" 
- Add the ~/.procmailrc file with the following content(NOT /etc/procmailrc): 


MAILDIR=SHOME/Maildir 
:0 
SMAILDIR/ 

- Add a copy ofthe file ~/.procmailre /etc/skel/.procmailre 
Add the additional directory: /etc/skel/Maildir/ 
and the following subdirectories: /etc/skel/Maildir/cur 


/etc/skel/Maildir/new 
/etc/skel/Maildir/tmp 

- Create the same structure for each existing user. eg. 
/home/username/Maildir/ 
/nome/username/Maildir/cur 
/home/username/Maildir/new 
/home/username/Maildir/tmp 


and give their ownership to the user. 
chown -R username. /home/username/Maildir/ 
- Add a copy of the file~/.procmailrc /home/username/.procmailrc 
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- If the dovecot-imapd is used, Make sure it is configured accordingly: 
/etc/dovecot/dovecot.coni 
protocols = imap 


mail location maildir:~/Maildir 
maildir copy with hardlinks=yes 


- No special changes needed for squirrelmail 


- MAIL CLIENT configuration: 
- Port 25 


- Need authentication (Give name and password) 
- Encryption=NONE 


- Authentication=PLAIN or LOGIN 


- More info in: 


/usr/share/doc/packages/postfix/README FILES/SASL_README 


Forward und Vacation Funktionen 
The file 


~/.forward 


will activate the forwarding of the user's mail to another local user. 
Just enter the local username of the user to which the mail should be forwarded. 
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